cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Enable/Disable per-user MFA with Microsoft graph powershell SDK

Enable/Disable per-user MFA with Microsoft graph powershell SDK
15

Upvotes

Upvote
 Jan 10 2022
4 Comments (4 New)
New

Hello,

The equivalent to enable / disable per-user MFA using Microsoft graph powershell SDK:

Create the StrongAuthenticationRequirement Object

$sa = New-Object -TypeName Microsoft.Online.Administration.StrongAuthenticationRequirement
$sa.RelyingParty = "*"
$sa.State = "Enabled"
$sar = @($sa)

Enable MFA for the user

Set-MsolUser -UserPrincipalName $user -StrongAuthenticationRequirements $sar

Regards,

Comment
Comments
MikeWilson
Copper Contributor
‎Feb 18 2022 10:09 AM
‎Feb 18 2022 10:09 AM

As a backup product, it is a security hole if we do not restore the MFA settings. With the deprecation of Basic Authentication, there is no way to restore MFA settings if they were previously set on the object being restored.   It makes sense that this ability is further restricted to backup products only to ensure no additional exposure while still maintaining security during a restore operation.

swissbuechi
Brass Contributor
‎May 31 2022 08:15 AM
‎May 31 2022 08:15 AM

We need this feature ASAP.

Not everyone has Conditional Access Configured. (Business Premium License required)

Security defaults also cannot be used in combination with a Breakglass Account...

Anwar Mahmood
Brass Contributor
‎Nov 09 2022 04:34 AM
‎Nov 09 2022 04:34 AM

see also

 

https://github.com/microsoftgraph/microsoft-graph-docs/issues/17374

EricZimmerman
Copper Contributor
‎Jan 30 2023 09:21 AM
‎Jan 30 2023 09:21 AM

Please implement this in Graph we need to be able to query current status and change the status in a non-interactive session, so MSOnline cannot be used.

Similar Ideas
No similar ideas